Computerworld - A patch is now available to fix a serious security vulnerability that was discovered in the popular Internet firewall software BlackIce Defender. The flaw could allow a user's machine to be taken over by an electronic attacker.
In an announcement late last week, Internet Security Systems Inc. (ISS) in Atlanta, the maker of BlackIce Defender and other security software products, acknowledged that the problem exists for users running the application on Microsoft Windows 2000 or XP.
BlackIce Defender users running the program on other Windows operating systems aren't affected, according to the company.
The problem, called a "ping flood vulnerability," can allow an attacker to intentionally crash or take control of computers running the firewall software by sending a large number of data packets to them, causing an electronic flood of data that overwhelms the application.
Patches are available for download on the company's Web site.
The affected applications are BlackIce Defender 2.9 and BlackIce Defender for Server 2.9.
Security alerts detailing the vulnerability had been previously posted on several Internet Web sites, including eEye Digital Security and Security Focus.
A spokesman at ISS couldn't be reached today for comment.
Related stories:
Read more about Security in Computerworld's Security Topic Center.
Free Insider GuideCopyright © 1994 - 2012 Computerworld Inc. All rights reserved. Reproduction in whole or in part in any form or medium without express written permission of Computerworld Inc. is prohibited. Computerworld and Computerworld.com and the respective logos are trademarks of International Data Group Inc.
